phoenix_html
Phoenix view functions for working with HTML templates
View on Github
Activity
- Latest release
- 11mo ago
- Total releases
- 67
- Cadence
- ~43 days
- Last 12 months
- 0
Reach
- Stars
- —
Details
- License
- MIT
- First release
- May 09, 2015
| Version | Released | |
|---|---|---|
4.3.0
minor
| ||
4.2.1
patch
| ||
4.2.0
minor
| ||
3.3.4
patch
| ||
4.1.1
patch
| ||
4.1.0
minor
| ||
4.0.0
major
| ||
3.3.3
patch
| ||
3.3.2
patch
| ||
3.3.1
patch
| ||
3.3.0
minor
| ||
3.2.0
minor
| ||
3.1.0
minor
| ||
3.0.4
patch
| ||
3.0.3
patch
1 CVE
CVE-2021-46871
GHSA-5g2h-9x5v-5h3x
GHSA-j3gg-r6gp-95q2
Jan 10, 2023
phoenix_html allows Cross-site Scripting in HEEx class attributes
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes Affected versions
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
2.0.0
2.0.0-dev
2.0.1
2.1.0
2.1.1
+ 41 more Show less
2.1.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
2.10.5
2.11.0
2.11.1
2.11.2
2.12.0
2.13.0
2.13.1
2.13.2
2.13.3
2.13.4
2.14.0
2.14.1
2.14.2
2.14.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.0-dev
2.5.0
2.5.1
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0-dev
2.8.0
2.9.0
2.9.1
2.9.2
2.9.3
3.0.0
3.0.1
3.0.2
3.0.3
Fixed in
3.0.4
References Updated Sep 10, 2026 · Source: OSV.dev | ||
3.0.2
patch
1 CVE
CVE-2021-46871
GHSA-5g2h-9x5v-5h3x
GHSA-j3gg-r6gp-95q2
Jan 10, 2023
phoenix_html allows Cross-site Scripting in HEEx class attributes
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes Affected versions
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
2.0.0
2.0.0-dev
2.0.1
2.1.0
2.1.1
+ 41 more Show less
2.1.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
2.10.5
2.11.0
2.11.1
2.11.2
2.12.0
2.13.0
2.13.1
2.13.2
2.13.3
2.13.4
2.14.0
2.14.1
2.14.2
2.14.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.0-dev
2.5.0
2.5.1
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0-dev
2.8.0
2.9.0
2.9.1
2.9.2
2.9.3
3.0.0
3.0.1
3.0.2
3.0.3
Fixed in
3.0.4
References Updated Sep 10, 2026 · Source: OSV.dev | ||
3.0.1
patch
1 CVE
CVE-2021-46871
GHSA-5g2h-9x5v-5h3x
GHSA-j3gg-r6gp-95q2
Jan 10, 2023
phoenix_html allows Cross-site Scripting in HEEx class attributes
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes Affected versions
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
2.0.0
2.0.0-dev
2.0.1
2.1.0
2.1.1
+ 41 more Show less
2.1.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
2.10.5
2.11.0
2.11.1
2.11.2
2.12.0
2.13.0
2.13.1
2.13.2
2.13.3
2.13.4
2.14.0
2.14.1
2.14.2
2.14.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.0-dev
2.5.0
2.5.1
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0-dev
2.8.0
2.9.0
2.9.1
2.9.2
2.9.3
3.0.0
3.0.1
3.0.2
3.0.3
Fixed in
3.0.4
References Updated Sep 10, 2026 · Source: OSV.dev | ||
3.0.0
major
1 CVE
CVE-2021-46871
GHSA-5g2h-9x5v-5h3x
GHSA-j3gg-r6gp-95q2
Jan 10, 2023
phoenix_html allows Cross-site Scripting in HEEx class attributes
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes Affected versions
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
2.0.0
2.0.0-dev
2.0.1
2.1.0
2.1.1
+ 41 more Show less
2.1.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
2.10.5
2.11.0
2.11.1
2.11.2
2.12.0
2.13.0
2.13.1
2.13.2
2.13.3
2.13.4
2.14.0
2.14.1
2.14.2
2.14.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.0-dev
2.5.0
2.5.1
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0-dev
2.8.0
2.9.0
2.9.1
2.9.2
2.9.3
3.0.0
3.0.1
3.0.2
3.0.3
Fixed in
3.0.4
References Updated Sep 10, 2026 · Source: OSV.dev | ||
2.14.3
patch
1 CVE
CVE-2021-46871
GHSA-5g2h-9x5v-5h3x
GHSA-j3gg-r6gp-95q2
Jan 10, 2023
phoenix_html allows Cross-site Scripting in HEEx class attributes
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes Affected versions
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
2.0.0
2.0.0-dev
2.0.1
2.1.0
2.1.1
+ 41 more Show less
2.1.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
2.10.5
2.11.0
2.11.1
2.11.2
2.12.0
2.13.0
2.13.1
2.13.2
2.13.3
2.13.4
2.14.0
2.14.1
2.14.2
2.14.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.0-dev
2.5.0
2.5.1
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0-dev
2.8.0
2.9.0
2.9.1
2.9.2
2.9.3
3.0.0
3.0.1
3.0.2
3.0.3
Fixed in
3.0.4
References Updated Sep 10, 2026 · Source: OSV.dev | ||
2.14.2
patch
1 CVE
CVE-2021-46871
GHSA-5g2h-9x5v-5h3x
GHSA-j3gg-r6gp-95q2
Jan 10, 2023
phoenix_html allows Cross-site Scripting in HEEx class attributes
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes Affected versions
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
2.0.0
2.0.0-dev
2.0.1
2.1.0
2.1.1
+ 41 more Show less
2.1.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
2.10.5
2.11.0
2.11.1
2.11.2
2.12.0
2.13.0
2.13.1
2.13.2
2.13.3
2.13.4
2.14.0
2.14.1
2.14.2
2.14.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.0-dev
2.5.0
2.5.1
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0-dev
2.8.0
2.9.0
2.9.1
2.9.2
2.9.3
3.0.0
3.0.1
3.0.2
3.0.3
Fixed in
3.0.4
References Updated Sep 10, 2026 · Source: OSV.dev | ||
2.14.1
patch
1 CVE
CVE-2021-46871
GHSA-5g2h-9x5v-5h3x
GHSA-j3gg-r6gp-95q2
Jan 10, 2023
phoenix_html allows Cross-site Scripting in HEEx class attributes
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes Affected versions
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
2.0.0
2.0.0-dev
2.0.1
2.1.0
2.1.1
+ 41 more Show less
2.1.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
2.10.5
2.11.0
2.11.1
2.11.2
2.12.0
2.13.0
2.13.1
2.13.2
2.13.3
2.13.4
2.14.0
2.14.1
2.14.2
2.14.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.0-dev
2.5.0
2.5.1
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0-dev
2.8.0
2.9.0
2.9.1
2.9.2
2.9.3
3.0.0
3.0.1
3.0.2
3.0.3
Fixed in
3.0.4
References Updated Sep 10, 2026 · Source: OSV.dev | ||
2.14.0
minor
1 CVE
CVE-2021-46871
GHSA-5g2h-9x5v-5h3x
GHSA-j3gg-r6gp-95q2
Jan 10, 2023
phoenix_html allows Cross-site Scripting in HEEx class attributes
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes Affected versions
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
2.0.0
2.0.0-dev
2.0.1
2.1.0
2.1.1
+ 41 more Show less
2.1.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
2.10.5
2.11.0
2.11.1
2.11.2
2.12.0
2.13.0
2.13.1
2.13.2
2.13.3
2.13.4
2.14.0
2.14.1
2.14.2
2.14.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.0-dev
2.5.0
2.5.1
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0-dev
2.8.0
2.9.0
2.9.1
2.9.2
2.9.3
3.0.0
3.0.1
3.0.2
3.0.3
Fixed in
3.0.4
References Updated Sep 10, 2026 · Source: OSV.dev | ||
2.13.4
patch
1 CVE
CVE-2021-46871
GHSA-5g2h-9x5v-5h3x
GHSA-j3gg-r6gp-95q2
Jan 10, 2023
phoenix_html allows Cross-site Scripting in HEEx class attributes
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes Affected versions
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
2.0.0
2.0.0-dev
2.0.1
2.1.0
2.1.1
+ 41 more Show less
2.1.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
2.10.5
2.11.0
2.11.1
2.11.2
2.12.0
2.13.0
2.13.1
2.13.2
2.13.3
2.13.4
2.14.0
2.14.1
2.14.2
2.14.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.0-dev
2.5.0
2.5.1
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0-dev
2.8.0
2.9.0
2.9.1
2.9.2
2.9.3
3.0.0
3.0.1
3.0.2
3.0.3
Fixed in
3.0.4
References Updated Sep 10, 2026 · Source: OSV.dev | ||
2.13.3
patch
1 CVE
CVE-2021-46871
GHSA-5g2h-9x5v-5h3x
GHSA-j3gg-r6gp-95q2
Jan 10, 2023
phoenix_html allows Cross-site Scripting in HEEx class attributes
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes Affected versions
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
2.0.0
2.0.0-dev
2.0.1
2.1.0
2.1.1
+ 41 more Show less
2.1.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
2.10.5
2.11.0
2.11.1
2.11.2
2.12.0
2.13.0
2.13.1
2.13.2
2.13.3
2.13.4
2.14.0
2.14.1
2.14.2
2.14.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.0-dev
2.5.0
2.5.1
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0-dev
2.8.0
2.9.0
2.9.1
2.9.2
2.9.3
3.0.0
3.0.1
3.0.2
3.0.3
Fixed in
3.0.4
References Updated Sep 10, 2026 · Source: OSV.dev | ||
2.13.2
patch
1 CVE
CVE-2021-46871
GHSA-5g2h-9x5v-5h3x
GHSA-j3gg-r6gp-95q2
Jan 10, 2023
phoenix_html allows Cross-site Scripting in HEEx class attributes
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes Affected versions
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
2.0.0
2.0.0-dev
2.0.1
2.1.0
2.1.1
+ 41 more Show less
2.1.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
2.10.5
2.11.0
2.11.1
2.11.2
2.12.0
2.13.0
2.13.1
2.13.2
2.13.3
2.13.4
2.14.0
2.14.1
2.14.2
2.14.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.0-dev
2.5.0
2.5.1
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0-dev
2.8.0
2.9.0
2.9.1
2.9.2
2.9.3
3.0.0
3.0.1
3.0.2
3.0.3
Fixed in
3.0.4
References Updated Sep 10, 2026 · Source: OSV.dev | ||
2.13.1
patch
1 CVE
CVE-2021-46871
GHSA-5g2h-9x5v-5h3x
GHSA-j3gg-r6gp-95q2
Jan 10, 2023
phoenix_html allows Cross-site Scripting in HEEx class attributes
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes Affected versions
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
2.0.0
2.0.0-dev
2.0.1
2.1.0
2.1.1
+ 41 more Show less
2.1.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
2.10.5
2.11.0
2.11.1
2.11.2
2.12.0
2.13.0
2.13.1
2.13.2
2.13.3
2.13.4
2.14.0
2.14.1
2.14.2
2.14.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.0-dev
2.5.0
2.5.1
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0-dev
2.8.0
2.9.0
2.9.1
2.9.2
2.9.3
3.0.0
3.0.1
3.0.2
3.0.3
Fixed in
3.0.4
References Updated Sep 10, 2026 · Source: OSV.dev | ||
2.13.0
minor
1 CVE
CVE-2021-46871
GHSA-5g2h-9x5v-5h3x
GHSA-j3gg-r6gp-95q2
Jan 10, 2023
phoenix_html allows Cross-site Scripting in HEEx class attributes
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes Affected versions
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
2.0.0
2.0.0-dev
2.0.1
2.1.0
2.1.1
+ 41 more Show less
2.1.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
2.10.5
2.11.0
2.11.1
2.11.2
2.12.0
2.13.0
2.13.1
2.13.2
2.13.3
2.13.4
2.14.0
2.14.1
2.14.2
2.14.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.0-dev
2.5.0
2.5.1
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0-dev
2.8.0
2.9.0
2.9.1
2.9.2
2.9.3
3.0.0
3.0.1
3.0.2
3.0.3
Fixed in
3.0.4
References Updated Sep 10, 2026 · Source: OSV.dev | ||
2.12.0
minor
1 CVE
CVE-2021-46871
GHSA-5g2h-9x5v-5h3x
GHSA-j3gg-r6gp-95q2
Jan 10, 2023
phoenix_html allows Cross-site Scripting in HEEx class attributes
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes Affected versions
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
2.0.0
2.0.0-dev
2.0.1
2.1.0
2.1.1
+ 41 more Show less
2.1.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
2.10.5
2.11.0
2.11.1
2.11.2
2.12.0
2.13.0
2.13.1
2.13.2
2.13.3
2.13.4
2.14.0
2.14.1
2.14.2
2.14.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.0-dev
2.5.0
2.5.1
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0-dev
2.8.0
2.9.0
2.9.1
2.9.2
2.9.3
3.0.0
3.0.1
3.0.2
3.0.3
Fixed in
3.0.4
References Updated Sep 10, 2026 · Source: OSV.dev | ||
2.11.2
patch
1 CVE
CVE-2021-46871
GHSA-5g2h-9x5v-5h3x
GHSA-j3gg-r6gp-95q2
Jan 10, 2023
phoenix_html allows Cross-site Scripting in HEEx class attributes
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes Affected versions
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
2.0.0
2.0.0-dev
2.0.1
2.1.0
2.1.1
+ 41 more Show less
2.1.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
2.10.5
2.11.0
2.11.1
2.11.2
2.12.0
2.13.0
2.13.1
2.13.2
2.13.3
2.13.4
2.14.0
2.14.1
2.14.2
2.14.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.0-dev
2.5.0
2.5.1
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0-dev
2.8.0
2.9.0
2.9.1
2.9.2
2.9.3
3.0.0
3.0.1
3.0.2
3.0.3
Fixed in
3.0.4
References Updated Sep 10, 2026 · Source: OSV.dev | ||
2.11.1
patch
1 CVE
CVE-2021-46871
GHSA-5g2h-9x5v-5h3x
GHSA-j3gg-r6gp-95q2
Jan 10, 2023
phoenix_html allows Cross-site Scripting in HEEx class attributes
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes Affected versions
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
2.0.0
2.0.0-dev
2.0.1
2.1.0
2.1.1
+ 41 more Show less
2.1.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
2.10.5
2.11.0
2.11.1
2.11.2
2.12.0
2.13.0
2.13.1
2.13.2
2.13.3
2.13.4
2.14.0
2.14.1
2.14.2
2.14.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.0-dev
2.5.0
2.5.1
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0-dev
2.8.0
2.9.0
2.9.1
2.9.2
2.9.3
3.0.0
3.0.1
3.0.2
3.0.3
Fixed in
3.0.4
References Updated Sep 10, 2026 · Source: OSV.dev | ||
2.11.0
minor
1 CVE
CVE-2021-46871
GHSA-5g2h-9x5v-5h3x
GHSA-j3gg-r6gp-95q2
Jan 10, 2023
phoenix_html allows Cross-site Scripting in HEEx class attributes
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes Affected versions
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
2.0.0
2.0.0-dev
2.0.1
2.1.0
2.1.1
+ 41 more Show less
2.1.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
2.10.5
2.11.0
2.11.1
2.11.2
2.12.0
2.13.0
2.13.1
2.13.2
2.13.3
2.13.4
2.14.0
2.14.1
2.14.2
2.14.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.0-dev
2.5.0
2.5.1
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0-dev
2.8.0
2.9.0
2.9.1
2.9.2
2.9.3
3.0.0
3.0.1
3.0.2
3.0.3
Fixed in
3.0.4
References Updated Sep 10, 2026 · Source: OSV.dev | ||
2.10.5
patch
1 CVE
CVE-2021-46871
GHSA-5g2h-9x5v-5h3x
GHSA-j3gg-r6gp-95q2
Jan 10, 2023
phoenix_html allows Cross-site Scripting in HEEx class attributes
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes Affected versions
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
2.0.0
2.0.0-dev
2.0.1
2.1.0
2.1.1
+ 41 more Show less
2.1.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
2.10.5
2.11.0
2.11.1
2.11.2
2.12.0
2.13.0
2.13.1
2.13.2
2.13.3
2.13.4
2.14.0
2.14.1
2.14.2
2.14.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.0-dev
2.5.0
2.5.1
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0-dev
2.8.0
2.9.0
2.9.1
2.9.2
2.9.3
3.0.0
3.0.1
3.0.2
3.0.3
Fixed in
3.0.4
References Updated Sep 10, 2026 · Source: OSV.dev | ||
2.10.4
patch
1 CVE
CVE-2021-46871
GHSA-5g2h-9x5v-5h3x
GHSA-j3gg-r6gp-95q2
Jan 10, 2023
phoenix_html allows Cross-site Scripting in HEEx class attributes
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes Affected versions
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
2.0.0
2.0.0-dev
2.0.1
2.1.0
2.1.1
+ 41 more Show less
2.1.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
2.10.5
2.11.0
2.11.1
2.11.2
2.12.0
2.13.0
2.13.1
2.13.2
2.13.3
2.13.4
2.14.0
2.14.1
2.14.2
2.14.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.0-dev
2.5.0
2.5.1
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0-dev
2.8.0
2.9.0
2.9.1
2.9.2
2.9.3
3.0.0
3.0.1
3.0.2
3.0.3
Fixed in
3.0.4
References Updated Sep 10, 2026 · Source: OSV.dev | ||
2.10.3
patch
1 CVE
CVE-2021-46871
GHSA-5g2h-9x5v-5h3x
GHSA-j3gg-r6gp-95q2
Jan 10, 2023
phoenix_html allows Cross-site Scripting in HEEx class attributes
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes Affected versions
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
2.0.0
2.0.0-dev
2.0.1
2.1.0
2.1.1
+ 41 more Show less
2.1.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
2.10.5
2.11.0
2.11.1
2.11.2
2.12.0
2.13.0
2.13.1
2.13.2
2.13.3
2.13.4
2.14.0
2.14.1
2.14.2
2.14.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.0-dev
2.5.0
2.5.1
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0-dev
2.8.0
2.9.0
2.9.1
2.9.2
2.9.3
3.0.0
3.0.1
3.0.2
3.0.3
Fixed in
3.0.4
References Updated Sep 10, 2026 · Source: OSV.dev | ||
2.10.2
patch
1 CVE
CVE-2021-46871
GHSA-5g2h-9x5v-5h3x
GHSA-j3gg-r6gp-95q2
Jan 10, 2023
phoenix_html allows Cross-site Scripting in HEEx class attributes
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes Affected versions
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
2.0.0
2.0.0-dev
2.0.1
2.1.0
2.1.1
+ 41 more Show less
2.1.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
2.10.5
2.11.0
2.11.1
2.11.2
2.12.0
2.13.0
2.13.1
2.13.2
2.13.3
2.13.4
2.14.0
2.14.1
2.14.2
2.14.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.0-dev
2.5.0
2.5.1
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0-dev
2.8.0
2.9.0
2.9.1
2.9.2
2.9.3
3.0.0
3.0.1
3.0.2
3.0.3
Fixed in
3.0.4
References Updated Sep 10, 2026 · Source: OSV.dev | ||
2.10.1
patch
1 CVE
CVE-2021-46871
GHSA-5g2h-9x5v-5h3x
GHSA-j3gg-r6gp-95q2
Jan 10, 2023
phoenix_html allows Cross-site Scripting in HEEx class attributes
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes Affected versions
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
2.0.0
2.0.0-dev
2.0.1
2.1.0
2.1.1
+ 41 more Show less
2.1.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
2.10.5
2.11.0
2.11.1
2.11.2
2.12.0
2.13.0
2.13.1
2.13.2
2.13.3
2.13.4
2.14.0
2.14.1
2.14.2
2.14.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.0-dev
2.5.0
2.5.1
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0-dev
2.8.0
2.9.0
2.9.1
2.9.2
2.9.3
3.0.0
3.0.1
3.0.2
3.0.3
Fixed in
3.0.4
References Updated Sep 10, 2026 · Source: OSV.dev | ||
2.10.0
minor
1 CVE
CVE-2021-46871
GHSA-5g2h-9x5v-5h3x
GHSA-j3gg-r6gp-95q2
Jan 10, 2023
phoenix_html allows Cross-site Scripting in HEEx class attributes
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes Affected versions
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
2.0.0
2.0.0-dev
2.0.1
2.1.0
2.1.1
+ 41 more Show less
2.1.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
2.10.5
2.11.0
2.11.1
2.11.2
2.12.0
2.13.0
2.13.1
2.13.2
2.13.3
2.13.4
2.14.0
2.14.1
2.14.2
2.14.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.0-dev
2.5.0
2.5.1
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0-dev
2.8.0
2.9.0
2.9.1
2.9.2
2.9.3
3.0.0
3.0.1
3.0.2
3.0.3
Fixed in
3.0.4
References Updated Sep 10, 2026 · Source: OSV.dev | ||
2.9.3
patch
1 CVE
CVE-2021-46871
GHSA-5g2h-9x5v-5h3x
GHSA-j3gg-r6gp-95q2
Jan 10, 2023
phoenix_html allows Cross-site Scripting in HEEx class attributes
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes Affected versions
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
2.0.0
2.0.0-dev
2.0.1
2.1.0
2.1.1
+ 41 more Show less
2.1.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
2.10.5
2.11.0
2.11.1
2.11.2
2.12.0
2.13.0
2.13.1
2.13.2
2.13.3
2.13.4
2.14.0
2.14.1
2.14.2
2.14.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.0-dev
2.5.0
2.5.1
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0-dev
2.8.0
2.9.0
2.9.1
2.9.2
2.9.3
3.0.0
3.0.1
3.0.2
3.0.3
Fixed in
3.0.4
References Updated Sep 10, 2026 · Source: OSV.dev | ||
2.9.2
patch
1 CVE
CVE-2021-46871
GHSA-5g2h-9x5v-5h3x
GHSA-j3gg-r6gp-95q2
Jan 10, 2023
phoenix_html allows Cross-site Scripting in HEEx class attributes
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes Affected versions
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
2.0.0
2.0.0-dev
2.0.1
2.1.0
2.1.1
+ 41 more Show less
2.1.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
2.10.5
2.11.0
2.11.1
2.11.2
2.12.0
2.13.0
2.13.1
2.13.2
2.13.3
2.13.4
2.14.0
2.14.1
2.14.2
2.14.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.0-dev
2.5.0
2.5.1
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0-dev
2.8.0
2.9.0
2.9.1
2.9.2
2.9.3
3.0.0
3.0.1
3.0.2
3.0.3
Fixed in
3.0.4
References Updated Sep 10, 2026 · Source: OSV.dev | ||
2.9.1
patch
1 CVE
CVE-2021-46871
GHSA-5g2h-9x5v-5h3x
GHSA-j3gg-r6gp-95q2
Jan 10, 2023
phoenix_html allows Cross-site Scripting in HEEx class attributes
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes Affected versions
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
2.0.0
2.0.0-dev
2.0.1
2.1.0
2.1.1
+ 41 more Show less
2.1.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
2.10.5
2.11.0
2.11.1
2.11.2
2.12.0
2.13.0
2.13.1
2.13.2
2.13.3
2.13.4
2.14.0
2.14.1
2.14.2
2.14.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.0-dev
2.5.0
2.5.1
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0-dev
2.8.0
2.9.0
2.9.1
2.9.2
2.9.3
3.0.0
3.0.1
3.0.2
3.0.3
Fixed in
3.0.4
References Updated Sep 10, 2026 · Source: OSV.dev | ||
2.9.0
minor
1 CVE
CVE-2021-46871
GHSA-5g2h-9x5v-5h3x
GHSA-j3gg-r6gp-95q2
Jan 10, 2023
phoenix_html allows Cross-site Scripting in HEEx class attributes
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes Affected versions
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
2.0.0
2.0.0-dev
2.0.1
2.1.0
2.1.1
+ 41 more Show less
2.1.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
2.10.5
2.11.0
2.11.1
2.11.2
2.12.0
2.13.0
2.13.1
2.13.2
2.13.3
2.13.4
2.14.0
2.14.1
2.14.2
2.14.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.0-dev
2.5.0
2.5.1
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0-dev
2.8.0
2.9.0
2.9.1
2.9.2
2.9.3
3.0.0
3.0.1
3.0.2
3.0.3
Fixed in
3.0.4
References Updated Sep 10, 2026 · Source: OSV.dev | ||
2.8.0
minor
1 CVE
CVE-2021-46871
GHSA-5g2h-9x5v-5h3x
GHSA-j3gg-r6gp-95q2
Jan 10, 2023
phoenix_html allows Cross-site Scripting in HEEx class attributes
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes Affected versions
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
2.0.0
2.0.0-dev
2.0.1
2.1.0
2.1.1
+ 41 more Show less
2.1.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
2.10.5
2.11.0
2.11.1
2.11.2
2.12.0
2.13.0
2.13.1
2.13.2
2.13.3
2.13.4
2.14.0
2.14.1
2.14.2
2.14.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.0-dev
2.5.0
2.5.1
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0-dev
2.8.0
2.9.0
2.9.1
2.9.2
2.9.3
3.0.0
3.0.1
3.0.2
3.0.3
Fixed in
3.0.4
References Updated Sep 10, 2026 · Source: OSV.dev | ||
2.7.0
minor
1 CVE
CVE-2021-46871
GHSA-5g2h-9x5v-5h3x
GHSA-j3gg-r6gp-95q2
Jan 10, 2023
phoenix_html allows Cross-site Scripting in HEEx class attributes
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes Affected versions
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
2.0.0
2.0.0-dev
2.0.1
2.1.0
2.1.1
+ 41 more Show less
2.1.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
2.10.5
2.11.0
2.11.1
2.11.2
2.12.0
2.13.0
2.13.1
2.13.2
2.13.3
2.13.4
2.14.0
2.14.1
2.14.2
2.14.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.0-dev
2.5.0
2.5.1
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0-dev
2.8.0
2.9.0
2.9.1
2.9.2
2.9.3
3.0.0
3.0.1
3.0.2
3.0.3
Fixed in
3.0.4
References Updated Sep 10, 2026 · Source: OSV.dev | ||
2.7.0-dev
pre
1 CVE
CVE-2021-46871
GHSA-5g2h-9x5v-5h3x
GHSA-j3gg-r6gp-95q2
Jan 10, 2023
phoenix_html allows Cross-site Scripting in HEEx class attributes
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes Affected versions
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
2.0.0
2.0.0-dev
2.0.1
2.1.0
2.1.1
+ 41 more Show less
2.1.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
2.10.5
2.11.0
2.11.1
2.11.2
2.12.0
2.13.0
2.13.1
2.13.2
2.13.3
2.13.4
2.14.0
2.14.1
2.14.2
2.14.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.0-dev
2.5.0
2.5.1
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0-dev
2.8.0
2.9.0
2.9.1
2.9.2
2.9.3
3.0.0
3.0.1
3.0.2
3.0.3
Fixed in
3.0.4
References Updated Sep 10, 2026 · Source: OSV.dev | ||
2.6.2
patch
1 CVE
CVE-2021-46871
GHSA-5g2h-9x5v-5h3x
GHSA-j3gg-r6gp-95q2
Jan 10, 2023
phoenix_html allows Cross-site Scripting in HEEx class attributes
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes Affected versions
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
2.0.0
2.0.0-dev
2.0.1
2.1.0
2.1.1
+ 41 more Show less
2.1.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
2.10.5
2.11.0
2.11.1
2.11.2
2.12.0
2.13.0
2.13.1
2.13.2
2.13.3
2.13.4
2.14.0
2.14.1
2.14.2
2.14.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.0-dev
2.5.0
2.5.1
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0-dev
2.8.0
2.9.0
2.9.1
2.9.2
2.9.3
3.0.0
3.0.1
3.0.2
3.0.3
Fixed in
3.0.4
References Updated Sep 10, 2026 · Source: OSV.dev | ||
2.6.1
patch
1 CVE
CVE-2021-46871
GHSA-5g2h-9x5v-5h3x
GHSA-j3gg-r6gp-95q2
Jan 10, 2023
phoenix_html allows Cross-site Scripting in HEEx class attributes
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes Affected versions
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
2.0.0
2.0.0-dev
2.0.1
2.1.0
2.1.1
+ 41 more Show less
2.1.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
2.10.5
2.11.0
2.11.1
2.11.2
2.12.0
2.13.0
2.13.1
2.13.2
2.13.3
2.13.4
2.14.0
2.14.1
2.14.2
2.14.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.0-dev
2.5.0
2.5.1
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0-dev
2.8.0
2.9.0
2.9.1
2.9.2
2.9.3
3.0.0
3.0.1
3.0.2
3.0.3
Fixed in
3.0.4
References Updated Sep 10, 2026 · Source: OSV.dev | ||
2.6.0
minor
1 CVE
CVE-2021-46871
GHSA-5g2h-9x5v-5h3x
GHSA-j3gg-r6gp-95q2
Jan 10, 2023
phoenix_html allows Cross-site Scripting in HEEx class attributes
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes Affected versions
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
2.0.0
2.0.0-dev
2.0.1
2.1.0
2.1.1
+ 41 more Show less
2.1.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
2.10.5
2.11.0
2.11.1
2.11.2
2.12.0
2.13.0
2.13.1
2.13.2
2.13.3
2.13.4
2.14.0
2.14.1
2.14.2
2.14.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.0-dev
2.5.0
2.5.1
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0-dev
2.8.0
2.9.0
2.9.1
2.9.2
2.9.3
3.0.0
3.0.1
3.0.2
3.0.3
Fixed in
3.0.4
References Updated Sep 10, 2026 · Source: OSV.dev | ||
2.5.1
patch
1 CVE
CVE-2021-46871
GHSA-5g2h-9x5v-5h3x
GHSA-j3gg-r6gp-95q2
Jan 10, 2023
phoenix_html allows Cross-site Scripting in HEEx class attributes
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes Affected versions
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
2.0.0
2.0.0-dev
2.0.1
2.1.0
2.1.1
+ 41 more Show less
2.1.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
2.10.5
2.11.0
2.11.1
2.11.2
2.12.0
2.13.0
2.13.1
2.13.2
2.13.3
2.13.4
2.14.0
2.14.1
2.14.2
2.14.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.0-dev
2.5.0
2.5.1
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0-dev
2.8.0
2.9.0
2.9.1
2.9.2
2.9.3
3.0.0
3.0.1
3.0.2
3.0.3
Fixed in
3.0.4
References Updated Sep 10, 2026 · Source: OSV.dev | ||
2.5.0
minor
1 CVE
CVE-2021-46871
GHSA-5g2h-9x5v-5h3x
GHSA-j3gg-r6gp-95q2
Jan 10, 2023
phoenix_html allows Cross-site Scripting in HEEx class attributes
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes Affected versions
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
2.0.0
2.0.0-dev
2.0.1
2.1.0
2.1.1
+ 41 more Show less
2.1.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
2.10.5
2.11.0
2.11.1
2.11.2
2.12.0
2.13.0
2.13.1
2.13.2
2.13.3
2.13.4
2.14.0
2.14.1
2.14.2
2.14.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.0-dev
2.5.0
2.5.1
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0-dev
2.8.0
2.9.0
2.9.1
2.9.2
2.9.3
3.0.0
3.0.1
3.0.2
3.0.3
Fixed in
3.0.4
References Updated Sep 10, 2026 · Source: OSV.dev | ||
2.4.0
minor
1 CVE
CVE-2021-46871
GHSA-5g2h-9x5v-5h3x
GHSA-j3gg-r6gp-95q2
Jan 10, 2023
phoenix_html allows Cross-site Scripting in HEEx class attributes
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes Affected versions
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
2.0.0
2.0.0-dev
2.0.1
2.1.0
2.1.1
+ 41 more Show less
2.1.2
2.10.0
2.10.1
2.10.2
2.10.3
2.10.4
2.10.5
2.11.0
2.11.1
2.11.2
2.12.0
2.13.0
2.13.1
2.13.2
2.13.3
2.13.4
2.14.0
2.14.1
2.14.2
2.14.3
2.2.0
2.3.0
2.3.1
2.4.0
2.4.0-dev
2.5.0
2.5.1
2.6.0
2.6.1
2.6.2
2.7.0
2.7.0-dev
2.8.0
2.9.0
2.9.1
2.9.2
2.9.3
3.0.0
3.0.1
3.0.2
3.0.3
Fixed in
3.0.4
References Updated Sep 10, 2026 · Source: OSV.dev |